Application access based on network

ABSTRACT

Example implementations relate to application access based on a network. For example, a computing device may include a processor. The processor may detect that the computing device is connected to a particular network and may identify an identifier associated with the particular network. The processor may access settings indicating a subset of applications associated with the identifier of the particular network, where the subset of applications is part of a set of applications available on the computing device. The processor may restrict access to the subset of applications based on the settings.

PRIORITY APPLICATION INFORMATION

This application is a continuation of U.S. National Stage ApplicationNo. 15/542,819 filed on Jul. 11, 2017, which claims priority toInternational Application No. PCT/US2015/023714 filed on Mar. 31, 2015.The contents of which are incorporated herein by reference in itsentirety.

BACKGROUND

A computing device may access various types of applications available onthe computing device, where each application may provide particularfeatures and functionalities. For example, a computing device may accessan email application that provides access to an email account associatedwith the email application or a weather application that provides aforecast of the weather.

BRIEF DESCRIPTION OF THE DRAWINGS

Some examples of the present application are described with respect tothe following figures:

FIG. 1 is a block diagram of an example system for accessing anapplication based on a network;

FIG. 2 is a block diagram of an example computing device for accessingan application based on a network;

FIG. 3 is a flowchart of an example method for accessing an applicationbased on a network;

FIG. 4 is an interface diagram showing example user interfacesassociated with accessing an application based on a network; and

FIG. 5 is a block diagram showing example applications accessible basedon an associated network.

DETAILED DESCRIPTION

As described above, a computing device may access various types ofapplications available on the computing device. However, if thecomputing device is connected to a particular network, a user may wishto restrict access to certain applications for various reasons relatingto that network. For example, if a user is in a coffee shop andconnected to the coffee shop's public network, the user may wish todisable access to the user's email application due to security concernsrelating to the public network. In another example, a user may wish torestrict access to certain applications on a computing device that achild may use on a public network (e.g., restricting access to a webbrowser application and/or a camera application when the computingdevice is connected to a public network), while those applications maybe made available on a home network (e.g., a web browser application maybe allowed on a home network that filters content).

To provide access to applications more securely, access to certainapplications available on a computing device may be restricted based onthe network to which the computing device is connected. For example,when a computing device connects to a particular Wi-Fi network and isauthenticated, an identifier associated with the Wi-Fi network may beused to configure the applications on the computing device such thatonly selected applications may be made available based on the networkconnection. For example, a user may provide settings that specify thatcertain applications may be accessed on the computing device when thecomputing device is connected to a particular network. The settings maybe specific to the computing device on which the settings were specifiedsuch that each computing device connected to a particular network mayaccess different subsets of applications based on the settings. Forexample, a first computing device may specify settings allowing accessto only a particular subset of applications, and a second computingdevice may specify settings allowing access to a different subset ofapplications. Settings may be specified for any suitable network, suchas networks currently being accessed, networks previously accessed,networks potentially accessed in the future, guest networks orunspecified networks, and the like. In some examples, networks for whichsettings have not yet been provided may have default settings, which maybe any suitable settings (e.g., all applications enabled, allapplications disabled, a certain subset of applications disabled, etc.).

The security features associated with these settings may be implementedin any suitable manner. For example, they may be implemented as asoftware package installable as an application or may be part of theoperating system of a device. In some examples, when the software isopened by a computing device for the first time, the software may querythe Network Support Database to pull known identifiers, such as serviceset identifications (SSIDs) for networks currently or previouslyaccessed by the computing device. Secondary openings of the software maycheck for new SSIDs and/or bypass this functionality, allowing the userto manually request a check for networks. In some examples, the securityfeatures may allow the user to manually input a particular SSID to whichthey may connect in the future for the purpose of configuring whichapplications are to be restricted when the computing device is connectedto a network associated with that particular SSID. In some examples, theapplications to be restricted (or authorized) for a given network may bedragged and dropped into a particular network SSID bucket. For example,any applications which are to be restricted (or allowed) for aparticular network may be dragged and dropped onto an SSID label forthat particular network. In some examples, if an application isrestricted but a user wishes to access the application, at theapplication start, a password override may be enabled such that theapplication may be made available if the correct password is given.

A computing device connected to a particular network may restrict accessto certain applications based on settings associated with thatparticular network. For example, the computing device may detect that itis connected to a particular network and identify an identifierassociated with the particular network. The computing device may accesssettings indicating a subset of applications associated with theidentifier of the particular network, where the subset of applicationsmay be part of a set of applications available on the computing device.The computing device may restrict access to the subset of applicationsbased on the settings. In some examples, the computing device may detectthat it is connect to a different network than the particular networkand may restrict access to a different subset of applications based onsettings associated with the different network. In some examples, thecomputing device may detect that it is not connected to any network andmay allow access to the entire set of applications available on thecomputing device.

Referring now to the figures, FIG. 1 is a block diagram of an examplesystem 100 for accessing an application based on a network. System 100may include computing device 102, which may be any suitable computingdevice, such as a notebook computer, a desktop computer, an all-in-onesystem, a tablet computing device, a mobile phone, a smart phone, anelectronic book reader, a printing device, or any other electronicdevice suitable for accessing applications available on computing device102 based on a network. Computing device 102 may be in communicationwith network device 104, which may be any suitable network devicecapable of providing computing device 102 with access to a particularnetwork, such as a modem, a router, or any other electronic devicesuitable for providing computing device 102 with access to a particularnetwork. The network that may be accessed via network device 104 may beany suitable network, such as an ad hoc network, an intranet, anextranet, a virtual private network (VPN), a local area network (LAN), awireless LAN (WLAN), a wide area network (WAN), a wireless WAN (WWAN), ametropolitan area network (MAN), a portion of the Internet, a portion ofthe Public Switched Telephone Network (PSTN), a cellular telephonenetwork, or any other type of network, or a combination of two or moresuch networks. Computing device 102 and network device 104 may be incommunication with each other via connection 106, which may be anysuitable connection such as a wired connection, a wireless connection(e.g., Wi-Fi), an electrical connection, and the like.

Computing device 102 may be any suitable computing device that may allowaccess to applications on available on computing device 102 based on thenetwork to which computing device 102 is connected. For example,computing device 102 may detect that it is connected to a particularnetwork (e.g., via network device 104) and may identify an identifierassociated with that particular network. The identifier may be anysuitable identifier that may be used to identify the associated network,such as a SSID. Computing device 102, which may have a set ofapplications available on computing device 102, may access settingsindicating a subset of the applications that are associated with theidentifier of the particular network. Computing device 102 may restrictaccess to the subset of applications based on the settings.

In some examples, while access is restricted to a subset ofapplications, the subset of applications may still be capable ofreceiving updates to the applications. For example, access to theapplications may be blocked but may still be operating in the backgroundsuch that updates (e.g., new emails, notifications, software updatesassociated with the applications, etc.) may be received. In someexamples, the execution of the subset of applications may be blockedbased on the settings. In some examples, while access is restricted to asubset of applications, the subset of applications may not receive anyupdates and/or may not be executed.

FIG. 2 is a block diagram of an example computing device 200 foraccessing an application based on a network. Computing device 200 may beany suitable computing device (e.g., computing device 102 of FIG. 1)that may restrict access to a subset of applications available oncomputing device 200 based on settings associated with a network towhich computing device 200 is connected.

Computing device 200 may be, for example, a web-based server, a localarea network server, a cloud-based server, a notebook computer, adesktop computer, an all-in-one system, a tablet computing device, amobile phone, an electronic book reader, a printing device, or any otherelectronic device suitable for accessing an application based on anetwork to which computing device 200 is connected. Computing device 200may include a processor 202 and a machine-readable storage medium 204.Computing device 200 may detect that it is connected to a particularnetwork, access settings associated with that network, and restrictaccess to a subset of applications available on computing device 200based on the settings.

Processor 202 is a tangible hardware component that may be a centralprocessing unit (CPU), a semiconductor-based microprocessor, and/orother hardware devices suitable for retrieval and execution ofinstructions stored in machine-readable storage medium 204. Processor202 may fetch, decode, and execute instructions 206, 208, and 210 tocontrol a process of accessing an application based on a network towhich computing device 200 is connected. As an alternative or inaddition to retrieving and executing instructions, processor 202 mayinclude at least one electronic circuit that includes electroniccomponents for performing the functionality of instructions 206, 208,210, or a combination thereof.

Machine-readable storage medium 204 may be any electronic, magnetic,optical, or other physical storage device that contains or storesexecutable instructions. Thus, machine-readable storage medium 204 maybe, for example, Random Access Memory (RAM), an EPROM, an ElectricallyErasable Programmable Read-Only Memory (EEPROM), a storage device, anoptical disc, and the like. In some examples, machine-readable storagemedium 204 may be a non-transitory storage medium, where the term“non-transitory” does not encompass transitory propagating signals. Asdescribed in detail below, machine-readable storage medium 204 may beencoded with a series of processor executable instructions 206, 208, and210 for detecting that computing device 200 is connected to a particularnetwork; determining an identifier associated with the particularnetwork; accessing settings associated with the identifier, identifyinga subset of applications specified by the settings, the subset ofapplications being part of a set of applications available on computingdevice 200; and restricting access to the subset of applications whilecomputing device 200 is connected to the particular network.

Network detection instructions 206 may manage and control the detectionof a particular network to which computing device 200 is connected,including determining an identifier associated with the particularnetwork to which computing device 200 is connected. For example, whencomputing device 200 connects to a network, network detectioninstructions 206 may detect the connection and the SSID associated withthe network. Network detection instructions 206 may also determine whencomputing device 200 is not connected to any networks and/or whencomputing device 200 switches its connection to a different network.

Settings instructions 208 may manage and control accessing settingsassociated with an identifier of a network to which computing device 200is connected and identifying a subset of applications specified by thosesettings. The settings may be accessed from memory 212, which may be anysuitable memory capable of storing settings specifying whichapplications are to be blocked and/or accessed based on connections tovarious networks. Settings instructions 208 may determine theappropriate settings associated with the particular network to whichcomputing device 200 is connected and use those settings to determinethe subset of applications that are to be blocked while computing device200 is connected to that network.

Application access instructions 210 may manage and control therestriction of access to a subset of applications based on the settings.For example, application access instructions 210 may restrict access tothe specified subset of applications while computing device 200 isconnected to the associated network.

FIG. 3 is a flowchart of an example method 300 for accessing anapplication based on a network. Method 300 may be implemented usingcomputing device 102 of FIG. 1 and/or computing device 200 of FIG. 2.

Method 300 includes, at 302, determining an identifier associated with aparticular network to which the computing device is connected. Forexample, when the computing device is connected to a particular network,the identifier (e.g., SSID) associated with the network may bedetermined.

Method 300 also includes, at 304, accessing settings associated with theidentifier. For example, the settings may be accessed from a memorystoring settings associated with various networks, where the settingsspecify to which applications to allow access based on the networkconnection.

Method 300 also includes, at 306, identifying a subset of applicationsspecified by the settings. The subset of applications may be part of aset of applications available on the computing device, and the subsetmay be specified by the settings associated with the correspondingnetwork to which the computing device is connected.

Method 300 also includes, at 308, blocking access to the subset ofapplications while the computing device is connected to the particularnetwork. The subset of applications may be blocked in any suitablemanner. For example, access to the subset of applications may be blockedby preventing the applications from being executed. In some examples,the subset of applications may each be capable of receiving updates eventhough access to the applications is blocked. In some examples, thesubset of applications may be locked (e.g., by a password). Theapplications that are not blocked may be enabled and accessed by a userof the computing device.

FIG. 4 is an interface diagram showing example user interfaces 400associated with accessing an application based on a network. The exampleuser interfaces 400 may include settings interface 402, which is aninterface that may display settings associated with a particularnetwork, and may also include a network connection interface 404, whichis an interface that may display various networks that may be availableand/or that may have been previously accessed. For example, when acomputing device (e.g., computing device 102 of FIG. 1 and/or computingdevice 200 of FIG. 2) is connected to a network with the SSID “MY HOME,”settings specified in settings interface 402 may be used to determine towhich applications to block access. As shown in settings interface 402,all applications may be accessed when a computing device is connected tothe “MY HOME” network. Additionally, settings associated with othernetworks may be specified, such as networks currently available and/ornetworks previously accessed. For example, settings associated with the“WORK” network may be specified to indicate to which applications toallow and/or restrict access, where the settings may be accessed byright-clicking the network identifier “WORK” in network connectioninterface 404. The settings may be specified in any suitable manner. Forexample, a user of a computing device may specify the settings forvarious networks and/or SSI Ds by providing a user input to specify thesettings (e.g., by checking the appropriate boxes in settings interface402), and/or the settings may be specified automatically. In someexamples, the check boxes shown in settings user interface 402 may bepre-populated as authorized, and the user may uncheck which applicationto restrict for a given network. In some examples, the settingsinterface 402 may be accessed after a user attempting to access thesettings interface 402 is authenticated (e.g., after the user providesthe correct password used to access settings interface 402).

FIG. 5 is a block diagram showing example applications 500 accessiblebased on an associated network. For example, when a computing device isconnected to a network with the SSID “WORK,” the settings may specifythat the computing device may only be allowed to access Application 1,Application 3, Application 4, and Application 5, while access to otherapplications may be restricted. When the computing device is connectedto a network with the SSID “COFFEE SHOP,” the settings may specify thatthe computing device may only be allowed to access Application 1 andApplication 4, while access to other applications may be restricted.When the computing device is connected to a network with the SSID“UPC123456,” the settings may specify that the computing device may onlybe allowed to access Applications 1-5, while access to otherapplications may be restricted.

Examples provided herein (e.g., methods) may be implemented in hardware,software, or a combination of both. Example systems may include acontroller/processor and memory resources for executing instructionsstored in a tangible non-transitory medium (e.g., volatile memory,non-volatile memory, and/or machine-readable media). Non-transitorymachine-readable media can be tangible and have machine-readableinstructions stored thereon that are executable by a processor toimplement examples according to the present disclosure.

An example system can include and/or receive a tangible non-transitorymachine-readable medium storing a set of machine-readable instructions(e.g., software). As used herein, the controller/processor can includeone or a plurality of processors such as in a parallel processingsystem. The memory can include memory addressable by the processor forexecution of machine-readable instructions. The machine-readable mediumcan include volatile and/or non-volatile memory such as a random accessmemory (“RAM”), magnetic memory such as a hard disk, floppy disk, and/ortape memory, a solid state drive (“SSD”), flash memory, phase changememory, and the like.

What is claimed is:
 1. A computing device, comprising: an interface todisplay a plurality of networks on the computing device; a processorcoupled to the interface, the processor to: display on the interface, aplurality of applications for a particular network of the plurality ofnetworks, wherein the displayed plurality of applications are availableto the computing device when the computing device is connected to theparticular network; deselect a subset of the plurality of applicationsfor the particular network, wherein the deselected subset ofapplications are restricted from use when the computing device isconnected to the particular network; and receive updates to thedeselected subset of applications when the access to the deselectedsubset of applications is restricted.
 2. The computing device of claim1, further comprising a settings interface to display settingsassociated with the plurality of networks.
 3. The computing device ofclaim 2, wherein the settings interface is accessible responsive to anauthentication of a user.
 4. The computing device of claim 3, whereinthe authentication is a password provided to the settings interface andauthenticated by the processor of the computing device.
 5. The computingdevice of claim 1, further comprising a network connection interface todisplay the plurality of networks.
 6. The computing device of claim 5,wherein the network connection interface is to display a subset of theplurality of networks that are currently available to the computingdevice.
 7. The computing device of claim 5, wherein the networkconnection interface is to display a subset of the plurality of networksthat have been previously accessed by the computing device.
 8. Thecomputing device of claim 1, wherein the plurality of networks includesan identifier specific to each network.
 9. The computing device of claim8, wherein the plurality of applications displayed on the interface arebased on pre-populated settings corresponding to the identifier.
 10. Acomputing system, comprising: an interface to display applicationscorresponding to a plurality of networks; and a processor coupled to theinterface, the processor to: detect that the computing device isconnected to a particular network of the plurality of networks; accessthe interface to display a subset of applications associated with theparticular network, wherein the interface specifies that the subset ofapplications is associated with a network previously accessed by thecomputing device; restrict access to the subset of applications based onthe settings associated with the network previously accessed by thecomputing device; and receive updates to the subset of applications whenthe access to the subset of applications is restricted.
 11. Thecomputing system of claim 10, wherein the subset of applications arelocked by a password responsive to being restricted.
 12. The computingsystem of claim 10, wherein the displayed subset of applicationsassociated with the particular network are deselected, via input to theinterface, to restrict access to the subset of applications.
 13. Anon-transitory machine-readable storage medium storing instructionsthat, when executed by at least one processor of a computing device,cause the computing device to: display an interface to displayapplications corresponding to a plurality of networks; detect that thecomputing device is connected to a particular network of the pluralityof networks; access the interface indicating a subset of applicationsassociated with the particular network, wherein the interface specifiesthe subset of applications associated with a network previously accessedby the computing device; restrict access to the subset of applicationsbased on the settings associated with the network previously accessed bythe computing device; and receive updates to the subset of applicationswhen the access to the subset of applications is restricted.
 14. Thenon-transitory machine-readable storage medium of claim 13, wherein theinstructions further cause the computing device to: determine via theinterface, an identifier associated with the particular network and anidentifier associated with the network previously accessed by thecomputing device; and restrict access to the subset of applicationsbased in part on the determined identifier of the particular network andthe determined identifier of the network previously accessed by thecomputing device.
 15. The non-transitory machine-readable storage mediumof claim 13, wherein: the particular network is publicly accessible byother computing devices; and the subset of applications arepre-populated to be accessible when the computing device is connected tothe network previously accessed by the computing device.